And yet, as critics have pointed out, a key method to implement these bills—through age verification methods that have yet to be decided—could lead to other harms for all internet users, including risks to privacy, speech, search, and access to the internet and association. Acknowledging the limitations of exclusively using ID as a form of verification, many state bills, including Montana, Louisiana, Arkansas, Utah, and New York, have left the door open for “commercially reasonable” age verification methods. To combat this, all bills with specifications for commercially reasonable age verification methods prohibit the data being used for verification from being stored or retained after verification is complete.